Privacy Policy

1. Photos of children — the important bit

Many people use colour.page to turn a family photo into a colouring page. Because those photos often show children, we want to be completely clear about what happens to them.

• What we do with your photo. When you upload a photo, it is stored securely and sent to our AI processing partner (Replicate) to convert it into line art. That is the only purpose it is used for.
• Who can see it. Your photos and generated pages are stored in private storage. They are not published, not shown to other users, and not browsable by anyone else. Files are only accessible through temporary, expiring secure links.
• We do not use your photos to train AI models, and we do not sell or share them for advertising or any other commercial purpose.
• How long we keep it. Uploaded photos are automatically deleted from our systems within 48 hours of processing. The colouring pages and activity sheets you generate are yours to download and keep. If you have an account, you can delete any page — or your entire account and all its content — at any time, and this removes the actual files, not just the records.
• Children do not create accounts. colour.page is intended for parents, carers and teachers. Accounts are for adults only. We do not knowingly collect personal data directly from children. If you believe a child has created an account, contact us and we will delete it.

2. Information we collect

If you use colour.page without an account:

• Photos and learning topics you submit, and the pages generated from them
• A randomly generated device identifier stored in your browser, so your pages appear on your device
• Basic technical information (device/browser type, approximate region, error logs)

If you create an account:

• Your email address
• Your password (stored securely in hashed form — we never see it), or, if you sign in with Google or Apple, basic profile information from that provider
• Your saved pages and collection
• Your subscription status

If you subscribe to Pro:

• Billing is handled entirely by Stripe. We never see or store your card number. We hold your email address and your subscription status.

If you buy a printer or other physical product:

• Your name, delivery address and contact details, so we can send your order
• Your order history. Payment is processed by Stripe; we do not store card details.

Usage analytics:

• We record the learning topics people type in (e.g. “letter b”, “dinosaurs”), how many pages are generated, and whether generations succeed or fail. This helps us decide what to build and improve.
• We use a short-lived, anonymous signal to see how many people are using the site at a given moment.
• These analytics are viewed in aggregate. Please avoid typing personal information (such as a child’s full name) into the learning topic box.

3. Why we use your information, and our lawful basis

Under UK GDPR we must have a lawful basis for using your data. Ours are:

We do not use your data for advertising, and we do not sell it to anyone.

4. Who we share it with

We use a small number of trusted service providers (“processors”) to run colour.page. They may only use your data to provide their service to us.

• Supabase — database, authentication and file storage
• Replicate — AI processing that turns your photo or topic into line art
• Stripe — payment processing for subscriptions and orders
• Resend — sending emails (such as your generated pages)
• Vercel — website hosting
• Google / Apple — only if you choose to sign in with them
• Delivery partners — for physical orders, we share the name and address needed to deliver your parcel

Some of these providers are based outside the UK, including in the United States. Where your data is transferred internationally, it is protected by appropriate safeguards such as UK International Data Transfer Agreements or Standard Contractual Clauses.

We may also disclose information where we are legally required to do so.

5. Cookies and similar technologies

We use only what’s necessary to make the site work:

• Essential cookies — to keep you signed in and keep your session secure
• Local storage — to remember your device so your pages appear when you return, even without an account

We do not use advertising or third-party tracking cookies.

6. How we keep your information safe

• Files are held in private storage and served only via temporary, expiring secure links — never public URLs
• Passwords are hashed and never visible to us
• Payment details are handled entirely by Stripe and never touch our systems
• Access to our systems is restricted

No service can promise perfect security, but we take this seriously — particularly given the nature of the images involved.

7. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Correct anything inaccurate
• Delete your data (“right to erasure”)
• Object to or restrict how we use it
• Portability — receive your data in a usable format
• Withdraw consent where we rely on it

How to delete your data:

• Delete a single page. In your library, use the delete button on any page to remove it and its files.
• Delete your whole account. On your account page there is a “Delete account” option that permanently removes your account together with every page and photo you have made.
• Ask us to do it. Without an account, or for any other request, email colour.page123@gmail.com and we will action it within one month.

In every case, deletion removes the actual image files from our storage, not just the database records.

Complaints: If you’re unhappy with how we’ve handled your data, please contact us first — we’d genuinely like to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk.

8. Changes to this policy

If we make significant changes, we will update the date at the top and, where appropriate, let you know in the app or by email.

9. Contact us

Questions, concerns, or requests about your data:

Email: colour.page123@gmail.com

Post: Ozeco Ltd, Unit A James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE

Registered with the UK Information Commissioner’s Office (ICO), registration number ZC207608.